The Linux Netfilter and its interface, the iptables command are truly powerful. However, configuring the Netfilter on the command line or automating changes is non trivial. With power comes great complexity. AC Firewall bridges the gap between the simpler needs of Linux as a server and the end user or application by making the configuration as simple as possible. Simple configuration files allow system administrators or application alike to easily make changes to Netfilter and establish a robust firewall.

Core Features

• Simple per interface configuration files
• Dedicated rule assignments for egress and ingress
• Handling of single ports, or port ranges
• Support for easy port forwarding
• Configure interfaces as up or down at the firewall level

AC Integrity provides a simple but effective solution to detecting problems with data integrity and system tampering. It runs in the background as a series of simple BASH scripts installed as a service and protects your system based on simple configuration files.

Use Cases

• Application tamper detection
  Ensure your critical application remains tamper free from unauthorized intrusion and get notified of any changed file within 30 minutes of the unexpected change.
• System boot time critical file tamper detection and handling
  Prevent a possibly compromised system from booting until safety has been assured by an administrator.
• Bit-rot detection on long term archive storage
  As physical storage degrades over time, bit-rot becomes a serious concern. Important files in long term archive, from financial records and company documents to home NAS contents such as treasured photographs and media library, need to be monitored to detect the first sign of deviation.

Core Features

• Class based rules for exception handling allowing the

1. Log an error
2. Send an email alert
3. Run a script
4. Halt the system

• Custom scan frequencies from minutes to days to weeks
• Easy assignment of scanning per single file or directory

Utilizing openssl, AC X509 Certificate Authority provides administrators with the power to create multiple root and intermediate level certificate authorities with features suitable for enterprise level management of user and system certificates. It should run on any system with openssl and BASH version 3.0 or higher.

AC X509 Authority is designed to be enterprise grade and work as the backbone of an organization\'s certificate management infrastructure. It will not necessarily meet every esoteric requirement but if the certificate generation controls meet your needs, then this is the tool for managing thousands of certificates for your systems and end users.

Core Features

• Text wizard driven setup of both root and intermediate certificate authorities.
• CRL management and publishing.
• DN field locking.
• Separate CA workflows for server and end user certificates.
• Export certificates as PEM encoded files or PKCS#12 keystores.
• Certificate listing and querying
• Self-contained directory structure for easy backup and recovery of all CAs and managed certificates.
• Single command line for generating new certificates.

Make Bash Installer provides the absolute simplest way to package installations for UNIX and Linux systems into a single file. No third party compression tools or archives with multiple files are required. Simply describe your application with a single configuration file; pass it to Make Bash Installer; and let it do the rest.

This tool is provided as a BASH script and utilizes common system commands to package applications into a single executable file that can run on any system that also runs BASH version 3.0 or higher. This completely untethers your application from the need for multiple installer packages like RPM and Apt.

Core Features

• Complex file and directory layouts
• Custom file permissions and ownership
• Script execution
• Uninstaller generation for simple applications
• Bulk archive generation and unpacking
• Simple configuration file interface.